General

  • Target

    2024-05-25_17a9d2d8311dcf8a1fc48cae95a968f2_cryptolocker

  • Size

    38KB

  • MD5

    17a9d2d8311dcf8a1fc48cae95a968f2

  • SHA1

    cb70b62c29c10a7f4f459bfdf765d97f821f658b

  • SHA256

    d283f0e24b50c4e0b95396e7b45fd988798e76feca380992457f72356836be4d

  • SHA512

    0b7ae4e62c20abebb01aa291142d7d4b1bddbdd42dfde62cbe9779fad98c864aa6f03dfd2fe33ee75d0c3a0c438d1e93e47c30b5ad33e50a23e61f6ee2064b12

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK38nn:qUmnpomddpMOtEvwDpjjaYaQ8n

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_17a9d2d8311dcf8a1fc48cae95a968f2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections